re the list of questionable files; as AO merely aggregates & minimizes the original JS of your WP-installation, the list of files in cache/autoptimize/js/ is specific to your site and is of little or no further use I'm afraid.
Instead you'll really have have the scanner run on your site without AO's JS optimization active, to identify which of the original JS-files (probably as part of plugin) are effectively infected.
frank